Re: MWEB legal department - call for assistance

Mark Elkins <mje-2mCUHEwelu/[email protected]> Tue, 27 May 2014 14:29:07 +0200
Newsgroups gmane.org.operators.ioz
Organization Posix Systems
Message-ID <[email protected]>
Hi Saul,

At one time, it may have been considered a good idea to run from a local
copy of a Root Nameserver so in the event of a catastrophe you'd be OK.
Another reason could have been you wanted some "alternative" names....
This did indeed happen. A week after 9/11, the generators on Manhattan
Island ran out of Diesel.

Nowadays, we have three (or more) of the Root Nameservers Anycasted from
JINX. So as long as your ISP has a connection to JINX (or CINX), you
have access to the Root. You should also have access down the chain to
South African based ISP's. There is a copy of ZA at JINX on
za-ns.anycast.pch.net. and there is a copy of CO.ZA at JINX on
coza1.dnsnode.net. (choosing AnyCast instances...)

Of course, if your ISP does not Peer at JINX...

On Tue, 2014-05-27 at 09:06 +0200, Saul wrote:
> HI Mark,
> 
> Interesting point you make, something that I have been pondering of late:
> 
> >The two types of Nameservers should be kept completely separate. A 
> >Recursive server must find an answer to a query by chasing the >answer down 
> >from the root. (And of course cache it for the designated time..)
> 
> Yes I agree 100% one has recursive and authoritative servers.
> 
> Lets work through the following scenario:
> 
> Just say I have both. My authoritative servers are responsible for 1000s of 
> domains. Why would I want my tens of thousands of eyeballs, going to the 
> root servers, inducing extra latency when if they could just look at the 
> authoritative server, the responses would be much better.
> 
> OK, one reason is that it would break DNS sec, but for smaller ISPs, it is 
> very important to keep the DNS for your clients up. If your upstream were to 
> loose connectivity the return to root, causes even your directly connected 
> clients to loose connectivity (DNS) to you. Yes, I might have other routes 
> to get to the root servers, but other levels of the DNS tree, so might know 
> where to look for .za, but can't get to them to look for co.za
> 
> Any thoughts?
> 
> 
> _______________________________________________
> IOZ mailing list
> [email protected]
> http://lists.internet.org.za/mailman/listinfo/ioz

-- 
Mark James ELKINS  -  Posix Systems - (South) Africa
mje-2mCUHEwelu/[email protected]       Tel: +27.128070590  Cell: +27.826010496
For fast, reliable, low cost Internet in ZA: https://ftth.posix.co.za

_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz
smime.p7s (application/x-pkcs7-signature, 5.7 KB) - not displayed